Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/1F009246E0D911ECA24D3757C4F9AE02.roa
File: 1F009246E0D911ECA24D3757C4F9AE02.roa (raw, json)
Hash identifier: Fjvw5LliSEbMrV6wUiJq/p3jZ9KScRt+h8abXzdEmLY=
Subject key identifier: 65:BF:52:45:E5:92:67:F2:1A:55:B1:77:81:D7:BB:AB:AB:FA:B0:45
Certificate issuer: /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial: 017E
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/1F009246E0D911ECA24D3757C4F9AE02.roa
Signing time: Tue 31 May 2022 11:59:28 +0000
ROA not before: Tue 31 May 2022 11:59:28 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 23674
IP address blocks: 103.175.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Validity
Not Before: May 31 11:59:28 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6296031f-2dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:e8:22:41:56:4c:34:20:f0:cc:8e:80:31:
1b:9f:b8:ef:bf:f0:a1:5c:d4:44:05:4d:27:f0:cb:
4c:1f:f2:3b:7a:45:c0:71:9c:51:cb:e6:e5:c0:b5:
71:13:b9:43:95:51:56:60:a9:95:c3:31:73:89:b7:
c4:84:a3:27:86:7f:50:53:57:27:e7:78:32:0c:c0:
a5:a4:e0:9f:44:4f:d8:ff:43:93:52:a3:a3:83:d1:
a3:96:c5:26:2f:d4:18:d7:90:bf:70:54:13:47:55:
e9:d7:98:47:01:48:6d:2f:2d:b7:f6:d6:64:8c:2e:
39:39:82:ac:ec:e9:38:a1:fa:13:79:27:3e:28:f2:
61:c9:e7:8f:b3:64:1d:39:8f:92:3b:ad:63:e0:83:
49:08:1a:0e:20:59:ee:a5:7f:b1:7a:46:1f:18:5b:
43:e9:52:6a:05:d7:56:a0:93:f0:b6:f3:78:f6:09:
34:76:93:f8:2d:59:fb:48:e1:49:36:1b:bd:79:39:
86:a5:86:15:cd:36:c6:a6:3c:8e:43:bd:04:85:70:
1d:01:9f:54:65:b8:2d:89:c3:08:b2:71:ba:b8:94:
2c:2b:dc:03:15:c8:ac:0f:4a:54:65:f3:88:85:f5:
bd:47:68:e8:f9:23:88:19:75:6e:de:b7:cd:89:42:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BF:52:45:E5:92:67:F2:1A:55:B1:77:81:D7:BB:AB:AB:FA:B0:45
X509v3 Authority Key Identifier:
keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/1F009246E0D911ECA24D3757C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.122.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:57:fe:b8:a9:6d:8d:ea:0f:b7:82:9c:d8:49:8c:4d:a3:f9:
74:7b:5b:d8:08:9d:f2:56:b4:88:94:fa:e9:7c:97:b5:5e:ce:
6f:1f:35:50:96:b3:c8:42:2e:d9:f5:2e:5a:9e:28:7e:aa:24:
64:00:22:46:9a:b2:7c:8f:65:82:ce:5d:0b:c6:29:0c:e8:8a:
58:89:79:34:2e:ef:5e:dc:57:16:b9:07:40:83:23:6d:0a:a5:
11:57:a9:0c:b2:fe:a9:3e:21:d2:a3:ca:11:65:56:66:67:5b:
df:68:ac:97:d9:5f:e2:cf:d1:cf:8a:d1:d9:75:4b:32:2b:d7:
85:cc:6d:5c:88:01:f1:26:f5:3b:59:61:de:0b:81:b7:1c:15:
db:3c:b7:3a:27:ef:a7:8e:ad:ba:a0:f9:cb:62:09:51:2b:8f:
ec:1a:56:1a:9b:52:ae:38:1e:6a:84:2b:c3:b6:2b:fe:25:7d:
4e:7f:35:8f:d7:81:58:b5:1e:62:70:8a:5f:86:6e:bf:6e:3d:
c4:53:83:c0:ee:b0:9b:a0:71:80:db:76:33:d5:13:ef:44:07:
28:e1:6b:48:75:9b:19:a1:a6:cb:55:5f:89:9b:7b:a0:a4:5d:
d7:da:1a:60:88:23:6a:26:62:d4:50:0f:fb:a3:9c:31:0f:e1:
76:45:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-ams.rpki-client.org